delvingbitcoin

Proving UTXO set inclusion in zero-knowledge

Proving UTXO set inclusion in zero-knowledge

Original Postby halseth

Posted on: September 17, 2024 08:50 UTC

The utilization of the utreexo data structure over a regular merkle tree for handling the UTXO set is highlighted as a strategic choice due to its straightforward conversion into a deterministic, per-block utreexo representation.

This decision underscores the importance of ensuring that data structures not only accommodate current needs but are also seamlessly adaptable to specific requirements such as determinism in block representation.

The challenge of proving the continuous openness of a channel is acknowledged, suggesting a potential solution could involve requiring proofs to be periodically updated, or "refreshed," every predetermined number of blocks. Additionally, incorporating a proof of the channel's age could enhance the robustness of the verification process. This approach addresses concerns regarding the temporal validity of channels, ensuring that proofs remain relevant and accurate over time.

There's an emphasis on the need to prove that the correct public key, rather than a blinded version, is committed within the utreexo structure. This distinction is crucial for maintaining integrity and transparency in transactions, ensuring that the actual public keys involved are verifiable. The current inability to detect the reuse of public keys for multiple proofs is identified as a limitation, particularly for applications like the Lightning Network (LN). Addressing this issue by adding functionality to identify key reuse would significantly improve the system's security and trustworthiness for LN transactions.